How to Create a Rule Based on Time Range

Elastic Stack Kibana
1

I'm trying to create a rule that detects when users login outside business hours (7AM-6PM). I believe this can be done with machine Learning, but I don not have that type of subscription. So, I've tried several ways, albeit all unsuccessful.

The latest batch of attempts involve RegEx, with this being my current one:

image
image1169×157 11.9 KB

However, when running the preview, I get this error, obviously related to my syntax. Although the RegEx is good, I'm not sure if this is the way to go about.

image

Any help is greatly appreciated.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.